# Aviatrix Documentation: Aviatrix Enterprise 8.2 Reference ## Reference - [Aviatrix Enterprise / 8.2 / Reference / API Reference (663 pages)](https://docs.aviatrix.com/_llms/aviatrix-enterprise/8-2/reference/api-reference.txt): Documentation for Aviatrix Enterprise / 8.2 / Reference / API Reference. ### CoPilot UI - [Dashboard](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/dashboard/index.md): This section provides the purpose, elements, and actions performed on the Dashboard pages. - [Groups](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/groups/index.md): This section provides the purpose, elements, and actions performed on the Groups pages. #### Cloud Fabric - [Topology](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/cloud-fabric/topology.md): This section provides the purpose, elements, and actions performed on the Topology pages. - [Gateways](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/cloud-fabric/gateways.md): This section provides the purpose, elements, and actions performed on the Gateways pages. - [Hybrid Cloud](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/cloud-fabric/hybrid-cloud.md): This section provides the purpose, elements, and actions performed on the Hybrid Cloud pages. - [Scaling](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/cloud-fabric/scaling.md): This section provides the purpose, elements, and actions performed on the Scaling pages. - [UserVPN](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/cloud-fabric/uservpn.md): This section provides the purpose, elements, and actions performed on the UserVPN pages. #### Networking - [Network Segmentation](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/networking/network-segmentation.md): This section provides the purpose, elements, and actions performed on the Network Segmentation pages. - [Connectivity](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/networking/connectivity.md): This section provides the purpose, elements, and actions performed on the Connectivity pages. #### Security - [Distributed Cloud Firewall](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/security/distributed-cloud-firewall.md): This section provides the purpose, elements, and actions performed on the Distributed Cloud Firewall pages. - [Egress](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/security/egress.md): This section provides the purpose, elements, and actions performed on the Egress pages. - [FireNet](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/security/firenet.md): This section provides the purpose, elements, and actions performed on the FireNet pages. - [ThreatIQ](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/security/threatiq.md): This section provides the purpose, elements, and actions performed on the ThreatIQ pages. - [Anomaly Detection](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/security/anomaly-detection.md): This section provides the purpose, elements, and actions performed on the Anomaly Detection pages. #### Cloud Resources - [Cloud Account](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/cloud-resources/cloud-account.md): This section provides the purpose, elements, and actions performed on the Cloud Account pages. - [Cloud Workloads](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/cloud-resources/cloud-workloads.md): This section provides the purpose, elements, and actions performed on the Cloud Workloads pages. - [Cloud Networks](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/cloud-resources/cloud-networks.md): This section provides the purpose, elements, and actions performed on the Cloud Networks pages. #### Monitor - [FlowIQ](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/monitor/flowiq.md): This section provides the purpose, elements, and actions performed on the FlowIQ pages. - [Performance](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/monitor/performance.md): This section provides the purpose, elements, and actions performed on the Performance pages. - [Traffic & Latencies](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/monitor/traffic-latencies.md): This section provides the purpose, elements, and actions performed on the Traffic & Latencies pages. - [CostIQ](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/monitor/costiq.md): This section provides the purpose, elements, and actions performed on the CostIQ pages. - [Notifications](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/monitor/notifications.md): This section provides the purpose, elements, and actions performed on the Notifications pages. #### Diagnostics - [AppIQ](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/diagnostics/appiq.md): This section provides the purpose, elements, and actions performed on the AppIQ pages. - [Diagnostic tools](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/diagnostics/diagnostic-tools.md): This section provides the purpose, elements, and actions performed on the Diagnostic tools pages. - [Cloud Routes](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/diagnostics/cloud-routes.md): This section provides the purpose, elements, and actions performed on the Cloud Routes pages. #### Administration - [User Access](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/administration/user-access.md): This section provides the purpose, elements, and actions performed on the User Access pages. - [Reports](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/administration/reports.md): This section provides the purpose, elements, and actions performed on the Reports pages. - [Audit](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/administration/audit.md): This section provides the purpose, elements, and actions performed on the Audit pages. - [Upgrade](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/administration/upgrade.md): This section provides the purpose, elements, and actions performed on the Upgrade pages. - [Billing](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/administration/billing.md): This section provides the purpose, elements, and actions performed on the Billing pages. #### Settings - [Configuration](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/settings/configuration.md): This section provides the purpose, elements, and actions performed on the Configuration pages. - [Resources](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/settings/resources.md): This section provides the purpose, elements, and actions performed on the Resources pages. - [Maintenance](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/settings/maintenance.md): This section explains where Controller upgrade and CoPilot backup and restore functionality moved to in the CoPilot UI. - [Support](https://docs.aviatrix.com/docs/enterprise/8.2/reference/ui/settings/support.md): This section provides the purpose, elements, and actions performed on the Support pages. ### General - [Multicloud Rosetta Stone](https://docs.aviatrix.com/docs/enterprise/8.2/reference/general/cloud-rosetta-stone.md): While some terms across the cloud computing industry are standard, such as a firewall or IP address, Aviatrix works with multiple CSPs (Cloud Service Providers) who use different vocabulary for similar concepts. - [Aviatrix Glossary](https://docs.aviatrix.com/docs/enterprise/8.2/reference/general/aviatrix-glossary.md): This Glossary provides definitions of Aviatrix products, features, tools, and general terminology. - [General Glossary](https://docs.aviatrix.com/docs/enterprise/8.2/reference/general/general-glossary.md): This Glossary provides definitions for terms related to common software, networking, cloud computing, or the Internet. For words and phrases directly associated with Aviatrix products, features, or terminology, please see Aviatrix Glossary. - [Error Messages](https://docs.aviatrix.com/docs/enterprise/8.2/reference/general/error-messages.md): This document records Aviatrix error messages, possible root causes and solutions. - [Federal Information Processing Standard (FIPS) 140-2 Module](https://docs.aviatrix.com/docs/enterprise/8.2/reference/general/fips-140-2.md): You can install the FIPS 140-2 Module via a Security Patch. - [AWS IAM Roles and Policies](https://docs.aviatrix.com/docs/enterprise/8.2/reference/general/iam-role.md): Aviatrix uses AWS IAM roles to give the Controller and gateways the permissions they need to build and secure your cloud network. This reference describes the aviatrix-role-ec2 and aviatrix-role-app roles and policies, how to audit and update them, and how to harden the trust relationship and scope… - [Account with Access Key for AWS China Accounts](https://docs.aviatrix.com/docs/enterprise/8.2/reference/general/access-key.md): This document describes how to set up an Aviatrix access account in AWS by using an IAM user access key and secret ID, instead of IAM roles. This onboarding method is designed for AWS China accounts. - [Required External Access for Aviatrix Products](https://docs.aviatrix.com/docs/enterprise/8.2/reference/general/required-external-access.md): Reference for the outbound and inbound network access — IP addresses, domains, and ports — that the Aviatrix Controller, gateways, CoPilot, and Aviatrix Edge require to external sites and DNS services. - [Managing the Relationship Between Feeds and ExternalGroups](https://docs.aviatrix.com/docs/enterprise/8.2/reference/externalgroup-about.md): The Groups > Feeds tab provides information from Aviatrix-managed external security feeds, such as Countries, Threat Feeds, and SaaS-based services like Azure Services/Service Regions and GitHub services. ### Best Practices - [Network Resiliency Best Practices Guide](https://docs.aviatrix.com/docs/enterprise/8.2/reference/best-practices/network-resiliency-best-practice.md): The Network Resiliency Best Practices Guide describes existing Aviatrix features that help you improve the reliability and resiliency of your Aviatrix network. These best practices mean that you will be able to absorb the impact of any issues that occur, while continuing to provide service. - [Secure VPCs Best Practices Guide](https://docs.aviatrix.com/docs/enterprise/8.2/reference/best-practices/secure-vpcs-best-practice.md): In today's cloud-centric world, securing Virtual Private Clouds (VPCs) and Virtual Networks (VNets) is paramount. Modern cloud architectures leverage the performance and security capabilities of Cloud Service Provider (CSP) networks to allow applications to directly egress and ingress to and... ### Control Plane - [Aviatrix CoPilot FAQs](https://docs.aviatrix.com/docs/enterprise/8.2/reference/controlplane/copilot-faq.md): Frequently asked questions about Aviatrix CoPilot, including migration, deployment, licensing, login, alerts, ThreatIQ, topology, and data management. - [CoPilot IP Access List Management](https://docs.aviatrix.com/docs/enterprise/8.2/reference/controlplane/copilot-ip-access-management.md): AWS and Azure both have a limit on the number of allowed security group rules. For AWS, if you exceed the limit, you can enable IP Access List Management in CoPilot. - [CoPilot Requirements](https://docs.aviatrix.com/docs/enterprise/8.2/reference/controlplane/copilot-platform-requirements.md): Ensure you have met the following requirements before deploying Aviatrix CoPilot: - [CoPilot Security Group Management](https://docs.aviatrix.com/docs/enterprise/8.2/reference/controlplane/copilot-security-group-management.md): CoPilot Security Group Management automates CoPilot inbound rules for gateway and Controller access. Supported on AWS, Azure, and GCP; enabled by default on AWS when CoPilot is deployed through the Controller. - [CoPilot User Account Administration](https://docs.aviatrix.com/docs/enterprise/8.2/reference/controlplane/copilot-user-account-administration.md): This section discusses user accounts for Aviatrix CoPilot and user account permissions required to use CoPilot features and functionality. - [FIPS 140-2 Module](https://docs.aviatrix.com/docs/enterprise/8.2/reference/controlplane/security-controller-fips.md): Aviatrix supports the FIPS 140-2 crypto module. - [Aviatrix Service Time Synchronization Policy](https://docs.aviatrix.com/docs/enterprise/8.2/reference/controlplane/time-sync-policy.md): Aviatrix Controllers and Gateways rely on predefined Network Time Protocol (NTP) sources to ensure accurate system time. Manual configuration of custom NTP sources is not supported. - [CoPilot Tuning and Performance](https://docs.aviatrix.com/docs/enterprise/8.2/reference/controlplane/tuning-performance.md): For a deployed CoPilot, application administrators can use options in CoPilot Home > Settings to tune the platform. ### Gateways - [Gateway Performance and Sizing](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/gateway-sizing.md): Recommended instance types and measured encrypted throughput for Aviatrix Spoke and Transit Gateways on AWS and Azure, organized by Aviatrix standard gateway size. - [Gateway States](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/gateway-state.md): Gateway state is dictated by the following factors. - [Gateway Keepalive](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/gateway-keepalive.md): The keepalive speed is a global configuration that applies to all Aviatrix gateways. Aviatrix gateways send periodic keepalive messages to the Aviatrix Controller that enables the Controller to determine when a gateway's state changes to monitor when a gateway is down. - [Disabling Rollback on Gateway Creation Error](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/gateway-keep-on-error.md): When an error occurs during a gateway creation, Aviatrix automatically rolls back all of the resources that was created during the gateway deployment process (elastic IP, storage volume, security groups, and so on) and terminates the gateway instance. - [Gateway Scaling (Deprecated)](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/gateway-scaling.md): Gateway Scaling policies in CoPilot under Cloud Fabric > Scaling > Policies are deprecated and no longer available to new users. - [Support for IPv6 on Aviatrix Gateways](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/gateway-ipv6-enable.md): Enable IPv6 support on Aviatrix CoPilot and configure IPv6 on Transit and Spoke Gateways. - [DNS Server Configuration for Aviatrix Gateways](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/transit-spoke-dns.md): Aviatrix Gateways use a well-known public DNS server for their hostname resolutions. This is to ensure the gateways can access services such as AWS SQS to retrieve messages from the Aviatrix Controller regardless of the underlying connectivity. - [High Performance Encryption Performance Benchmarks](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/hpe-perf-benchmark.md): Aviatrix High Performance Encryption is available on AWS, Azure, GCP, and OCI. #### Edge - [Supported Edge Hardware for the Aviatrix Edge Platform](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/edge/edge-hardware-specs.md): This document provides a list of the edge hardware supported on the Aviatrix Edge Platform. - [Edge Gateway Virtual Machine Requirements](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/edge/edge-vm-requirements.md): This document provides the Edge Gateway virtual maching (VM) configurations that are supported and network access requirements. - [Dell Poweredge Bios Configuration](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/edge/edge-device-bios-config.md): Enable the following BIOS configurations on the Dell PowerEdge. - [Prerequisites for Edge Spoke and Edge Transit Deployment on Edge Platforms](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/edge/edge-spoke-transit-planning.md): The following are the prerequisites to deploy an Aviatrix Edge Spoke and Edge Transit Gateways on the Aviatrix Edge Platform, Equinix Network Edge, Megaport, and Aviatrix Edge Spoke on-premises VMware ESXi and KVM. - [Edge Spoke Gateway Interfaces](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/edge/edge-spoke-interfaces.md): The following sections describes the WAN, LAN, VLAN, and Management network interfaces supported on the Edge Spoke Gateway. #### Auto Right-Sizing - [Selecting Auto Right-Sizing Settings](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/auto-right-sizing/auto-right-sizing-settings.md): It is best to set the monitoring frequency before implementing any auto right-sizing recommendations. - [Auto Right-Sizing Metrics and Optimization](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/auto-right-sizing/ars-metrics.md): The gateway instance metrics captured by the Auto Right-Sizing feature, along with optimization information such as Performance, Cost Savings, and Urgency, can assist you in analyzing the current state of gateway instances and identifying which ones require resizing. - [Auto Right-Sizing Maintenance Window](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/auto-right-sizing/auto-right-sizing-maintenance.md): Use Auto Right-Sizing maintenance windows to determine when resizing actions occur. When an operation starts within a maintenance window it will finish even if the operation takes longer than the time remaining in the maintenance window (if the operation has already begun). - [Mapping Aviatrix Standard Gateway Sizes to VM Instance Sizes](https://docs.aviatrix.com/docs/enterprise/8.2/reference/gateways/auto-right-sizing/auto-right-sizing-standard-sizes.md): On the Cloud Fabric > Scaling > Auto Right-Sizing tab, you can click Aviatrix Standard Sizes to show standard sizing for Aviatrix Spoke, Specialty, and Transit Gateways (AWS and Azure) and how they map to AWS and Azure VM instance sizes. ### Connectivity - [External BGP Connection Notification Settings](https://docs.aviatrix.com/docs/enterprise/8.2/reference/connectivity/external-connections-bgp-settings.md): You can configure these settings from the Networking > Connectivity > External Connections (S2C) tab. These settings are applied to external connections (Site2Cloud) that use BGP. ### Monitoring - [Aviatrix Log Formats](https://docs.aviatrix.com/docs/enterprise/8.2/reference/monitoring/aviatrix-log-format.md): The Aviatrix Controller and all of its managed gateways can be configured to forward their logs to well known log management systems. This section describes Aviatrix log keywords that can be identified by log management systems for further analysis. - [Billing Item Descriptions](https://docs.aviatrix.com/docs/enterprise/8.2/reference/monitoring/billing-item-descriptions.md): The following table lists the billing items that you might see on the Billing page, depending on your billing plan. The items are listed in alphabetical order by the names displayed in the CoPilot UI. - [Metrics Monitored for Aviatrix Resources](https://docs.aviatrix.com/docs/enterprise/8.2/reference/monitoring/metrics-monitor.md): The system metrics and network metrics that you can access in CoPilot are captured by the Aviatrix Controller. The Controller pulls the data from virtual machines (instances/hosts) that Aviatrix Gateways run on and feeds that data to CoPilot. ### Security #### Egress - [Egress Security Score](https://docs.aviatrix.com/docs/enterprise/8.2/reference/egress-filtering/egress-security-score.md): Controller 8.0 is required to view the Egress Security Score. - [How is Egress Security Score Calculated](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/egress/egress-security-score-calculated.md): Controller 8.0 is required to view the Egress Security Score. #### FireNet - [Supported Firewall Versions](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/firewalls-supported-versions.md): Below are the versions of the Check Point, FortiGate, and Palo Alto firewalls that Aviatrix supports. - [Firewall Interface Specifications](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/firewall-interfaces.md): Palo Alto firewall versions greater than 9.1.3 are supported in the GCP Transit FireNet configuration if you select one of the available Flex Next-Generation firewall options. - [Load Balancing Traffic Between Different Firewalls](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/firenet-load-balance.md): In AWS Transit FireNet, you can either allow the Aviatrix Transit gateways to perform the load balancing (inherent/default function, configured when you create the FireNet gateway), or you can enable AWS GWLB (Gateway Load Balancer) when you create a FireNet in an AWS Transit Gateway (AWS... - [Transit FireNet Security Groups](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/firenet-security-groups.md): On a firewall LAN interface, there are two interfaces: eth2 on PAN; or eth1 on FortiGate and Check Point. This interface accepts all data traffic to be inspected or that is going to the Internet (if egress is enabled). - [Aviatrix FireNet / AWS Transit Gateway Native Deployment Comparison](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/firenet-deployment-tgw.md): There are two native deployments: TGW VPN to connect to firewall or TGW VPC attachment to connect to firewall. - [Example Configuration for FortiGate VM in GCP](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/config-fortigate-gcp.md): You can follow this example to set up the FortiGate Next Generation Firewall instance for GCP, to validate that packets are sent to the FortiGate Next Generation Firewall for VPC-to-VPC and from VPC-to-internet traffic inspection. - [Example Configuration for Check Point VM in AWS](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/firewall-check-point-aws.md): In this document, we provide an example to set up the Check Point Security Gateway instance for you to validate that packets are indeed sent to the Check Point Security Gateway for VPC-to-VPC and from VPC to internet traffic inspection. - [Example Configuration for Check Point VM in Azure](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/firewall-check-point-azure.md): In this document, we provide an example to set up the Check Point Security Gateway instance for you to validate that packets are indeed sent to the Check Point Security Gateway for VNet-to-VNet and from VNet to internet traffic inspection. - [Example Configuration for Palo Alto VM-Series in AWS](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/firewall-paloalto-configure-aws.md): You can follow these steps to set up your Palo Alto VM-Series firewall and validate that packets are indeed sent to the VM-Series for VPC-to-VPC inspection. - [Example Configuration for Palo Alto VM-Series in Azure](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/firewall-paloalto-configure-azure.md): After you deploy your Palo Alto VM-Series firewall in the Transit VNet, you can use this example to ensure that traffic is inspected between Spoke VNets using firewall policies. - [Example Configuration for FortiGate VM in AWS](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/fortigate-example-intro-aws.md): In this document, we provide an example to set up the FortiGate Next Generation Firewall instance for you to validate that packets are sent to the FortiGate Next Generation Firewall for VPC-to-VPC and from VPC-to-Internet traffic inspection. - [Example Configuration for FortiGate VM in Azure](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/fortigate-example-intro-azure.md): In this document, we provide an example to set up the FortiGate Next Generation Firewall instance for you to validate that packets are sent to the FortiGate Next Generation Firewall for VNet-to-VNet and from VNet-to-Internet traffic inspection. - [Example Configuration for Palo Alto Network VM-Series in GCP](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/paloalto-vmseries-gcp.md): In this document, we provide an example to set up the VM-Series for you to validate that packets are indeed sent to the VM-Series for VPC-to-VPC and from VPC to internet traffic inspection. - [Example Configuration for Palo Alto Network VM-Series in OCI](https://docs.aviatrix.com/docs/enterprise/8.2/reference/security/firenet/paloalto-vmseries-oci.md): In this document, we provide an example to set up the VM-Series for you to validate that packets are indeed sent to the VM-Series for VCN to VCN and from VCN to internet traffic inspection. #### DCF - [Distributed Cloud Firewall Supported Capabilities](https://docs.aviatrix.com/docs/enterprise/8.2/reference/dcf/dcf-capabilities.md): Since Controller Version 6.8, DCF has been supported in AWS, AWS GovCloud, Azure, Azure Government, and GCP. - [Configuring Distributed Cloud Firewall](https://docs.aviatrix.com/docs/enterprise/8.2/reference/dcf/dcf-configuring.md): This section describes the Distributed Cloud Firewall (DCF) functional area of Aviatrix CoPilot. - [Public Subnet Filtering and Distributed Cloud Firewall](https://docs.aviatrix.com/docs/enterprise/8.2/reference/dcf/dcf-psf.md): Enforcement of DCF rules on PSF gateways is supported in Controller version 7.2.4820 and above. Legacy security features (such as Egress FQDN Filtering) must be disabled if DCF on PSF Gateways is enabled. - [External Connection (Site2Cloud) and Distributed Cloud Firewall](https://docs.aviatrix.com/docs/enterprise/8.2/reference/dcf/dcf-s2c.md): Distributed Cloud Firewall (DCF) rules can be pushed to Spoke or Transit Gateways as follows: - [Distributed Cloud Firewall and Transit Egress](https://docs.aviatrix.com/docs/enterprise/8.2/reference/dcf/dcf-transit-egress.md): Aviatrix supports Distributed Cloud Firewall (DCF) enforcement on Transit Egress, allowing you to apply DCF rules on a centralized egress gateway. This feature is designed to enhance egress traffic management in multi-cloud environments by enabling consistent policy enforcement and inspection... - [Kubernetes Prerequisites and Permissions](https://docs.aviatrix.com/docs/enterprise/8.2/reference/dcf/kubernetes-prerequisites.md): You must ensure that certain prerequisites and permissions are configured before implementing Aviatrix Kubernetes Firewall. - [Disable SNAT for Kubernetes Workloads](https://docs.aviatrix.com/docs/enterprise/8.2/reference/dcf/kubernetes-snat.md): Aviatrix DCF requires SNAT to be disabled on Kubernetes worker nodes so pod source IP addresses are preserved across the Aviatrix data plane. This page covers EKS, AKS, and GKE. - [Kubernetes CRD Reference](https://docs.aviatrix.com/docs/enterprise/8.2/reference/dcf/kubernetes-crd-reference.md): Field reference, status schema, and CoPilot object naming conventions for the Aviatrix FirewallPolicy and WebgroupPolicy custom resources. ### Terraform - [Terraform Modules](https://docs.aviatrix.com/docs/enterprise/8.2/reference/terraform/modules.md): Terraform modules provide reusable, standardized infrastructure components that simplify deployment and ensure consistency across environments. - [Terraform Provider](https://docs.aviatrix.com/docs/enterprise/8.2/reference/terraform/provider.md): Link to the Aviatrix Terraform Provider documentation on the Terraform Registry. ### Feature Modes - [Aviatrix Feature Modes](https://docs.aviatrix.com/docs/enterprise/8.2/reference/feature-modes/index.md): Aviatrix features are introduced through a structured lifecycle. The structured lifecycle lets you explore and provide feedback on new capabilities as they mature. ### Compatibility - [Aviatrix Feature Availability by Controller Version](https://docs.aviatrix.com/docs/enterprise/8.2/reference/compatibility/feature-availability.md): This section describes the availability of Aviatrix features when running different versions of Aviatrix Controller. - [Aviatrix Support: End-of-Life and End-of-Support Policy](https://docs.aviatrix.com/docs/enterprise/8.2/reference/compatibility/eol-eos-policy.md): Official End-of-Life (EoL) and End-of-Support (EoS) policies for Aviatrix Controller and Gateway software, including the published lifecycle schedule. ### UserVPN - [Aviatrix UserVPN FAQ](https://docs.aviatrix.com/docs/enterprise/8.2/reference/uservpn/user-vpn-faq.md): Aviatrix's VPN Client supports SAML authentication from the VPN client itself and SAML redirection. You can use the Aviatrix VPN Client to authenticate against an IdP (for example, Okta and Azure AD). ### Release Notices - [Field Notices](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/field-notices/index.md): These field notices are provided as a service to our customers to proactively update them on major issues. This service is provided without any changes in our SLA. The information in this field notice will be updated as we learn more. - [PSIRT Advisories](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/psirt-advisories/index.md): The Aviatrix Product Security Team continually tests the software product, looking for vulnerabilities and weaknesses. If you have a security issue to report, please open a support ticket on the Aviatrix Support Portal. - [Security Patches](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/security-patches/index.md): The Settings > Maintenance > Security Patches page in the Aviatrix Controller lists all available security patches and indicates whether or not they have been installed. #### Release Notes - [Aviatrix Controller and Gateway Software Release Notes](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/release-notes/controller/index.md): This release notes section includes the following topics: - [Aviatrix Controller and Gateway Image Release Notes](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/release-notes/controller-images/index.md): This document provides image release notes for Aviatrix Controller and Gateway images across supported cloud providers: - [Aviatrix CoPilot Release Notes](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/release-notes/copilot/index.md): This section describes release notes for Aviatrix CoPilot software releases. - [Aviatrix CoPilot Image Release Notes](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/release-notes/copilot-images/index.md): Aviatrix CoPilot is delivered via one image that should be maintained with the latest version for managing security and support for the product. You can launch the Aviatrix CoPilot image instance in the AWS, Microsoft Azure, Google Cloud, or Oracle Cloud marketplaces. - [VPN Client Release Notes](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/release-notes/vpn-client/index.md): Aviatrix VPN Client release notes. This page tracks client software updates, fixes, and platform compatibility. #### What's New - [What's New in the Aviatrix Platform?](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/what-is-new/what-is-new.md): Follow these links to learn about the latest features and updates available in the Aviatrix Platform offerings: - [What's New in the Aviatrix Controller](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/what-is-new/what-is-new-controller.md): Summary of new features and enhancements in the Aviatrix Controller. - [What's New in CoPilot?](https://docs.aviatrix.com/docs/enterprise/8.2/reference/release-notices/what-is-new/what-is-new-copilot.md): This page provides information about the latest Aviatrix CoPilot features. ## OpenAPI Specs - [aviatrix-api](/openapi/8.2/aviatrix-api.json)